Invisible Island

invisible-island

37 CVEs • 5 products

Products (5)

Click to collapse

Toggle

CVEs (37)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-20229 1Invisible Island 1Mawk Apr 2, 2026 Mar 28, 2026 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 MAWK 1.3.3-17 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-supplied input. Attackers can craft malicious...Show more MAWK 1.3.3-17 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-supplied input. Attackers can craft malicious input that overflows the stack buffer and execute a return-oriented programming chain to spawn a shell with application privileges.Show less
CVE-2025-69720 1Invisible Island 1Ncurses Jun 17, 2026 Mar 19, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
CVE-2023-50495 1Invisible Island 1Ncurse Jun 17, 2026 Dec 12, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().
CVE-2020-19190 3Gnu Invisible IslandNetapp 3Active Iq Unified Manager NcursesNcurses Jul 23, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVE-2020-19189 4Debian GnuInvisible Island+1 more 4Active Iq Unified Manager Debian LinuxNcurses+1 more Jul 23, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVE-2020-19188 3Gnu Invisible IslandNetapp 3Active Iq Unified Manager NcursesNcurses Jul 23, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVE-2020-19187 3Gnu Invisible IslandNetapp 3Active Iq Unified Manager NcursesNcurses Jul 23, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVE-2020-19186 3Gnu Invisible IslandNetapp 3Active Iq Unified Manager NcursesNcurses Jul 23, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVE-2020-19185 3Gnu Invisible IslandNetapp 3Active Iq Unified Manager NcursesNcurses Jul 23, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVE-2023-40359 1Invisible Island 1Xterm Jun 17, 2026 Aug 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installat...Show more xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.Show less
CVE-2023-29491 2Gnu Invisible Island 2Ncurses Ncurses Jul 27, 2026 Apr 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached...Show more ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.Show less
CVE-2022-45063 2Fedoraproject Invisible Island 2Fedora Xterm Jun 17, 2026 Nov 10, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the...Show more xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.Show less
CVE-2022-29458 4Apple DebianGnu+1 more 4Debian Linux MacosNcurses+1 more Jul 27, 2026 Apr 18, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.
CVE-2022-24130 3Debian FedoraprojectInvisible Island 3Debian Linux FedoraXterm Jun 17, 2026 Jan 31, 2022 N/A· v4 5.5 MEDIUM· v3 2.6 LOW· v2 xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.
CVE-2021-39537 3Apple GnuInvisible Island 4Mac Os X MacosNcurses+1 more Jul 27, 2026 Sep 20, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
CVE-2021-27135 3Debian FedoraprojectInvisible Island 3Debian Linux FedoraXterm Jun 17, 2026 Feb 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.
CVE-2019-17595 3Gnu Invisible IslandOpensuse 3Leap NcursesNcurses Jul 27, 2026 Oct 14, 2019 N/A· v4 5.4 MEDIUM· v3 5.8 MEDIUM· v2 There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
CVE-2019-17594 3Gnu Invisible IslandOpensuse 3Leap NcursesNcurses Jul 27, 2026 Oct 14, 2019 N/A· v4 5.3 MEDIUM· v3 4.6 MEDIUM· v2 There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
CVE-2018-19217 2Gnu Invisible Island 2Ncurses Ncurses Jul 23, 2026 Nov 12, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not rep...Show more In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not reproduce for that version according to the maintainer or a reliable third-partyShow less
CVE-2018-19211 2Gnu Invisible Island 2Ncurses Ncurses Jul 23, 2026 Nov 12, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious chara...Show more In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.Show less

12 Next